Thread: Port Scanning/Failed Login attempts for getting into your server

So, I thought I would share this with those running hosting companies and that want to avoid getting hacked on their server so below I have listed a number of IPs to block using CSF or whatever means as they tried to run port scans and serveral failed login attempts for Root. These were permanently blocked by CSF for our server. So, I would permanently block them if I were you.

190.149.90.164
200.108.235.68
64.55.144.41
66.82.97.113
123.201.73.169
95.135.126.198
173.45.70.50
78.138.168.178
189.152.76.122
121.28.27.94
69.79.77.117
195.34.252.15
115.118.25.122
80.233.128.6
122.172.63.176
59.97.192.25
202.101.42.73
91.206.5.254
122.165.29.72
190.158.85.29
189.153.41.80
94.43.198.85
216.104.45.109
80.227.151.134
84.243.222.13
121.245.214.201
213.248.150.156
92.47.222.32
78.85.10.68
122.163.18.193
205.234.111.10
216.104.45.109
78.138.168.199
190.43.119.144
90.151.3.189
74.205.222.2
41.221.242.132
211.38.137.44
67.191.54.13
193.37.156.146
190.87.250.105
200.106.20.234
59.95.167.174
59.94.10.157
78.183.73.121
82.178.5.94
59.182.50.60
203.92.154.37
61.129.60.23
200.164.76.166
95.132.216.233
193.19.229.74
95.189.130.218
202.124.160.152
190.40.103.44
190.45.255.253
189.173.2.120
89.162.152.194
216.104.47.230
216.104.45.109
216.104.45.109
190.154.240.19
190.71.110.140
116.74.12.60

Please feel free to add to the list, in quotes please, if you have any suspicious activity on your server.

9/10 it's a bot and it's ip changes each connection.

I just let my firewall do the work for me 99.9% of the time

thanks for the list ... I did block all the IP .. but from where did you get this list

Originally Posted by grim

I just let my firewall do the work for me 99.9% of the time

If the firewall is built right, that's the way it should be